Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
File:                     Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft (raw, json)
Hash identifier:          n896oCw5qHdpcoxqfkKGaHWPGlnUmk5GspDBnKV/J9c=
Subject key identifier:   5A:E7:6A:27:A3:B4:86:0E:45:D0:51:6B:3B:CC:3A:98:83:C6:36:EA
Authority key identifier: 5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D
Certificate issuer:       /CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
Certificate serial:       01962E98709FC9105B894A4F453B194B7CF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft
Manifest number:          025F
Signing time:             Sun 13 Apr 2025 10:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:04 +0000
Files and hashes:         1: OcSSArCWQB8P_3TQhOP1Kjmg4F4.roa (hash: +2C6c4zXqA1Vi974tbwpI0Ciww2lyqoubywKBoSNij8=)
                          2: Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl (hash: 8wR5eopj/ttPO3ko/stgSp4H3NzKcq3HZYaQa4k8HcA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:70:9f:c9:10:5b:89:4a:4f:45:3b:19:4b:7c:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a87fcc85cb499419a1b1ec2f3209c2a435fb92d
        Validity
            Not Before: Apr 13 10:01:04 2025 GMT
            Not After : Apr 14 10:01:04 2025 GMT
        Subject: CN=5ae76a27a3b4860e45d0516b3bcc3a9883c636ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:29:3d:6d:1c:a1:c4:38:84:6f:38:c8:be:8b:
                    df:8a:35:1e:8a:49:17:be:fd:92:9d:b8:56:b6:12:
                    01:f9:34:b1:b4:36:91:48:1e:91:69:0f:d2:98:79:
                    fc:eb:85:f0:e7:27:2c:ca:6c:b9:5a:2d:51:f1:f1:
                    18:3b:0a:91:19:ac:cd:1a:c1:66:4e:cd:a7:12:a0:
                    ae:8b:d2:70:18:53:c3:24:5b:65:0f:d8:46:54:63:
                    2f:ff:19:bc:a4:e3:a3:fe:f3:65:e0:4d:4e:69:3c:
                    aa:86:2d:79:24:3c:3d:17:4e:58:17:d1:5e:b8:e9:
                    77:7f:9f:72:4b:96:97:e3:e8:63:a8:ac:92:78:f4:
                    e9:b7:1a:b8:ef:b6:21:6e:0c:bb:e2:85:88:e4:26:
                    17:ba:17:07:9e:64:50:f1:dd:97:10:9c:72:33:07:
                    21:16:d4:56:2f:94:26:f1:a3:03:13:4c:0f:d4:94:
                    33:35:68:77:17:42:68:73:bc:f3:e5:3d:16:c5:36:
                    31:3e:be:99:76:98:88:c8:39:cb:58:89:66:dd:51:
                    c0:a6:e7:1f:76:ef:a9:7c:55:56:11:45:93:de:03:
                    ac:31:0d:11:74:0f:ea:0a:09:f2:c2:43:e4:f6:d0:
                    17:84:03:94:0c:b0:94:85:39:9a:fc:35:75:6e:27:
                    fd:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E7:6A:27:A3:B4:86:0E:45:D0:51:6B:3B:CC:3A:98:83:C6:36:EA
            X509v3 Authority Key Identifier:
                keyid:5A:87:FC:C8:5C:B4:99:41:9A:1B:1E:C2:F3:20:9C:2A:43:5F:B9:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wof8yFy0mUGaGx7C8yCcKkNfuS0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/685f2d-bde4-49fd-a143-994bb628bba5/1/Wof8yFy0mUGaGx7C8yCcKkNfuS0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e3:4c:a5:91:58:4e:e4:f5:0a:66:77:35:c3:39:41:1f:ab:
         cf:d5:65:22:60:c9:9d:18:e0:d1:ee:68:aa:f6:aa:7d:1f:fa:
         bb:58:e8:74:c3:b8:f5:28:18:6c:36:67:61:92:d5:e6:5e:13:
         62:4c:76:49:f0:6c:f5:48:ec:92:74:02:d7:6f:de:77:9f:6b:
         0c:7d:2b:4c:fb:47:cd:f6:e9:6b:10:e1:a4:b4:64:19:c5:5f:
         ec:32:ef:83:4d:70:26:73:83:c5:13:24:c9:68:64:10:c4:f5:
         0b:b6:cf:bc:87:17:d3:58:b9:cb:e9:26:25:20:b6:65:2c:b8:
         90:a5:02:90:d8:52:04:04:3d:a8:fa:40:59:82:d9:bb:98:0d:
         43:4d:06:69:15:0e:02:d5:07:41:42:e0:05:75:e2:1b:6d:ab:
         37:6a:4b:7b:24:59:55:14:df:85:ff:45:f6:79:94:64:5f:4f:
         c2:9d:f3:ee:3b:ba:64:90:bd:0a:7f:ff:27:2f:ea:e6:d4:de:
         87:a9:63:5e:31:e3:44:f2:8f:ea:d3:17:fe:e0:c1:3d:b3:a9:
         5e:ef:74:fb:b6:cf:e6:53:31:a2:7b:da:ed:20:8a:35:36:72:
         b2:ef:db:2c:b2:ea:a1:36:77:23:30:43:09:a2:4c:d6:64:e1:
         33:d8:cc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----